Wow-company vulnerabilities
28 CVEs and advisories name Wow-company as an affected vendor, newest first. Follow it as a feed.
- CVE-2017-20245Wow Viral Signups 2.1 WordPress Plugin SQL Injection
- CVE-2017-20244Wow Forms WordPress Plugin 2.1 SQL Injection
- CVE-2025-53258WordPress Hover Effects plugin <= 2.1.2 - SQL Injection Vulnerability
- CVE-2025-30912WordPress Float menu plugin <= 6.1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
- CVE-2025-26760WordPress Calculator Builder plugin <= 1.6.2 - Local File Inclusion vulnerability
- CVE-2025-24699WordPress WP Coder Plugin <= 3.6 - CSRF to Cross Site Scripting (XSS) vulnerability
- CVE-2025-24724WordPress Side Menu Lite Plugin <= 5.3.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
- CVE-2025-24716WordPress Herd Effects Plugin <= 6.2.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
- CVE-2025-24717WordPress Modal Window Plugin <= 6.1.4 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
- CVE-2025-24715WordPress Counter Box Plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
- CVE-2025-24713WordPress Button Generator – easily Button Builder Plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-24720WordPress Sticky Buttons Plugin <= 4.1.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
- CVE-2025-24711WordPress Popup Box Plugin <= 3.2.4 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-24714WordPress Bubble Menu Plugin <= 4.0.2 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2023-49154WordPress Button Generator – easily Button Builder plugin <= 2.3.8 - Broken Access Control vulnerability
- CVE-2024-43346WordPress Modal Window – create popup modal window plugin <= 6.0.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-35634Woocommerce – Recent Purchases plugin <= 1.0.1 - File Inclusion vulnerability
- CVE-2024-35629WordPress Easy Digital Downloads – Recent Purchases plugin <= 1.0.2 - Remote File Inclusion vulnerability
- CVE-2023-52149WordPress Floating Button Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-49155WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-27418WordPress Side Menu Lite Plugin <= 4.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-25443WordPress Button Generator – easily Button Builder Plugin <= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-27452WordPress Button Generator – easily Button Builder Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23984WordPress Bubble Menu – circle floating menu Plugin <= 3.0.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-29447WordPress Hover Effects plugin <= 2.1 - Authenticated Local File Inclusion (LFI) vulnerability
- CVE-2022-29448WordPress Herd Effects plugin <= 5.2 - Local File Inclusion (LFI) vulnerability
- CVE-2022-29446WordPress Counter Box plugin <= 1.1.1 - Authenticated Local File Inclusion (LFI) vulnerability
- CVE-2022-29445WordPress Popup Box plugin <= 2.1.2 - Authenticated Local File Inclusion (LFI) vulnerability